Skip to content

build(deps): update test XMLUnit to 2.11.0#792

Open
jbeckwith-oai wants to merge 1 commit into
mainfrom
codex/update-test-xmlunit
Open

build(deps): update test XMLUnit to 2.11.0#792
jbeckwith-oai wants to merge 1 commit into
mainfrom
codex/update-test-xmlunit

Conversation

@jbeckwith-oai

@jbeckwith-oai jbeckwith-oai commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Constrain org.xmlunit:xmlunit-core to 2.11.0 in the core WireMock, OkHttp WireMock, and Spring starter test graphs.
  • Keep WireMock at 2.35.2 and Spring Boot at 2.7.18.
  • Address Dependabot alert release: 0.7.0 #27 / CVE-2024-31573 without changing any published dependency.

Version choice

The advisory is fixed in XMLUnit 2.10.0. XMLUnit 2.11.0 is the safest current 2.x target for these graphs: upstream states its xmlunit-core is identical to 2.10.4, while the newer 2.12.0 release explicitly documents a backward-incompatible DTD parsing default.

Upstream release notes: https://github.com/xmlunit/xmlunit/releases/tag/v2.11.0

Compatibility analysis

  • All constraints are on testImplementation; XMLUnit is not used by SDK production code or exposed to consumers.
  • The 2.11.0 core jar targets Java 7 bytecode, preserving this SDK’s Java 8 consumer baseline.
  • A public/protected API comparison from the existing 2.9.1 core jar to 2.11.0 found no removed classes, methods, or fields; changes are additive.
  • Dependency insight confirms 2.11.0 in core, OkHttp, Spring, and the core published-Jackson test runtime.
  • WireMock and Spring tests pass without changing their parent dependency versions.
  • Both Jackson compatibility lines remain verified: 2.14.0 and the published 2.18.9 line.
  • Generated POMs for all published modules contain no XMLUnit dependency or constraint.

Validation

  • ./scripts/test --rerun-tasks --no-daemon
  • ./gradlew :openai-java-core:testJacksonPublished --rerun-tasks --no-daemon
  • ./scripts/lint
  • ./scripts/build --no-daemon
  • ./scripts/detect-breaking-changes origin/main
  • ./gradlew generatePomFileForMavenPublication --no-daemon
  • Dependency insight for core, OkHttp, Spring, and jacksonPublishedRuntime
  • git diff --check

@jbeckwith-oai jbeckwith-oai requested a review from a team as a code owner July 15, 2026 23:11
@openai-sdks

openai-sdks Bot commented Jul 15, 2026 •
edited
Loading

Copy link
Copy Markdown

OkTest Summary

✅ 237/237 SDK tests passed in 17.164s for Java SDK PR #792.

Test results — 42 files
Test Result Time
tests/chat-completions-complex-body.test.ts ✅ Passed 315ms
tests/chat-completions-create.test.ts ✅ Passed 786ms
tests/chat-completions-stream.test.ts ✅ Passed 339ms
tests/files-content-binary.test.ts ✅ Passed 331ms
tests/files-create-multipart.test.ts ✅ Passed 393ms
tests/files-list-pagination.test.ts ✅ Passed 273ms
tests/initialize-config.test.ts ✅ Passed 183ms
tests/instance-isolation.test.ts ✅ Passed 313ms
tests/models-list.test.ts ✅ Passed 216ms
tests/responses-background-lifecycle.test.ts ✅ Passed 676ms
tests/responses-body-method-errors.test.ts ✅ Passed 478ms
tests/responses-cancel-timeout.test.ts ✅ Passed 215ms
tests/responses-cancel.test.ts ✅ Passed 312ms
tests/responses-compact-retries.test.ts ✅ Passed 558ms
tests/responses-compact.test.ts ✅ Passed 383ms
tests/responses-create-advanced-stream.test.ts ✅ Passed 691ms
tests/responses-create-advanced.test.ts ✅ Passed 1.61s
tests/responses-create-disconnect.test.ts ✅ Passed 1.105s
tests/responses-create-errors.test.ts ✅ Passed 466ms
tests/responses-create-malformed-api-responses.test.ts ✅ Passed 310ms
tests/responses-create-retries.test.ts ✅ Passed 300ms
tests/responses-create-stream-failures.test.ts ✅ Passed 240ms
tests/responses-create-stream-timeout.test.ts ✅ Passed 223ms
tests/responses-create-stream-wire.test.ts ✅ Passed 6.19s
tests/responses-create-stream.test.ts ✅ Passed 458ms
tests/responses-create-terminal-states.test.ts ✅ Passed 493ms
tests/responses-create-timeout.test.ts ✅ Passed 231ms
tests/responses-create.test.ts ✅ Passed 370ms
tests/responses-delete.test.ts ✅ Passed 205ms
tests/responses-input-items-errors.test.ts ✅ Passed 285ms
tests/responses-input-items-list.test.ts ✅ Passed 373ms
tests/responses-input-items-options.test.ts ✅ Passed 460ms
tests/responses-input-tokens-count-timeout.test.ts ✅ Passed 234ms
tests/responses-input-tokens-count.test.ts ✅ Passed 487ms
tests/responses-malformed-inputs.test.ts ✅ Passed 5.024s
tests/responses-not-found-errors.test.ts ✅ Passed 376ms
tests/responses-parse.test.ts ✅ Passed 685ms
tests/responses-retrieve-retries.test.ts ✅ Passed 371ms
tests/responses-retrieve.test.ts ✅ Passed 239ms
tests/responses-stored-method-errors.test.ts ✅ Passed 1.028s
tests/retry-behavior.test.ts ✅ Passed 3.584s
tests/sdk-error-shape.test.ts ✅ Passed 481ms

View OkTest run #29462770196

SDK merge (70218836a053) · head (e0f934337e53) · base (845b2bc87fb0) · OkTest (fd7a761c81c1)

@jbeckwith-oai jbeckwith-oai force-pushed the codex/update-test-xmlunit branch from e559800 to e0f9343 Compare July 16, 2026 00:55
@jbeckwith-oai jbeckwith-oai changed the title fix(deps): update test XMLUnit to 2.11.0 build(deps): update test XMLUnit to 2.11.0 Jul 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jbeckwith-oai